I would add the use of noscript or a similar white listing javascript blocker would probably be of use as well.
uMatrix is very nice, a whitelisting everything blocker with a really intuitive interface.
I don't see how non-professional can browse the net with JS blocker on. Most of the sites nowdays just won't work and average user won't have any way to figure out why.